CVE-2006-0424

medium

Description

BEA WebLogic Server and WebLogic Express 8.1 through SP4, 7.0 through SP6, and 6.1 through SP7 allows remote authenticated guest users to read the server log and obtain sensitive configuration information.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/24295

http://www.vupen.com/english/advisories/2006/0313

http://www.securityfocus.com/bid/16358

http://www.osvdb.org/22776

http://securitytracker.com/id?1015528

http://secunia.com/advisories/18592

http://dev2dev.bea.com/pub/advisory/168

Details

Source: Mitre, NVD

Published: 2006-01-25

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N